https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 19:10:21 +0000 https://cve.radiocsirt.org/vuln/cve-2017-6094 <p>CPEs used by subscribers on the access network receive their individual configuration settings from a central GAPS instance. A CPE identifies itself by the MAC address of its WAN interface and a certain &#34;chk&#34; value (48bit) derived from the MAC. The algorithm used to compute the &#34;chk&#34; was disclosed by reverse engineering the CPE&#39;s firmware. As a result, it is possible to forge valid &#34;chk&#34; values for any given MAC address and therefore receive the configuration settings of other subscribers&#39; CPEs. The configuration settings often contain sensitive values, for example credentials (username/password) for VoIP services. This issue affects Genexis B.V. GAPS up to 7.2.</p> <p>CPEs used by subscribers on the access network receive their individual configuration settings from a central GAPS instance. A CPE identifies itself by the MAC address of its WAN interface and a certain &#34;chk&#34; value (48bit) derived from the MAC. The algorithm used to compute the &#34;chk&#34; was disclosed by reverse engineering the CPE&#39;s firmware. As a result, it is possible to forge valid &#34;chk&#34; values for any given MAC address and therefore receive the configuration settings of other subscribers&#39; CPEs. The configuration settings often contain sensitive values, for example credentials (username/password) for VoIP services. This issue affects Genexis B.V. GAPS up to 7.2.</p> https://cve.radiocsirt.org/vuln/cve-2017-6094